Authenthication and Roles

[Scott Battaglia]

As the Authentication is associated with the TicketGrantingTicket you should
not make changes to it later on depending on the service.  Your best bet
would be to load the roles at the creation of the Authenticaton object (for
all services).

-Scott

On 11/18/06, Gustavo Nalle Fernandes <gustavonalle at terra.com.br> wrote:
>
> Is it possible to "enrich" the Authentication object (populate some
> roles) *after* the TGT is obtained, perhaps during the Service Ticket
> emission or during Service Ticket Validation? I need this because during
> the login (when TGT is obtaind) process, I don't have information about
> what service the user will access, and thus cannot populate roles (that
> is service dependant) in the Authentication Object. I will only have
> this information when the Service Ticket is asked, because of  the value
> of the SimpleService passed.
>
> Thanks
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.409 / Virus Database: 268.14.5/533 - Release Date: 13/11/2006
>
> _______________________________________________
> Yale CAS mailing list
> cas at tp.its.yale.edu
> http://tp.its.yale.edu/mailman/listinfo/cas
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://tp.its.yale.edu/pipermail/cas/attachments/20061121/c43df008/attachment.html